The person at the front desk used my medical records to get my personal number then texted me about 8 times asking if I was single and such. I kept asking whowas this and finally they admitted who they were and where they worked. Is this a hipaa violation? If so, what do I do next?